How Does A Waf Protect Against Common Attacks Like Sql Injection And Cross-Site Scripting